$ rpki-client -vvf rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft File: sCOWweSXbcJLufJA9c5Vbtgn-is.mft (raw, json) Hash identifier: FafiN13zcYJ9doI6NOvLPJBCYoAYM/Bkqw4GQLuL4sI= Subject key identifier: C9:6A:71:19:30:B3:5F:A1:27:DE:FA:C2:D0:69:11:71:C0:4C:A2:09 Authority key identifier: B0:23:96:C1:E4:97:6D:C2:4B:B9:F2:40:F5:CE:55:6E:D8:27:FA:2B Certificate issuer: /CN=A91124CD/serialNumber=B02396C1E4976DC24BB9F240F5CE556ED827FA2B Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft Manifest number: F2 Signing time: Sun 29 Jun 2025 04:19:10 +0000 Manifest this update: Sun 29 Jun 2025 04:19:09 +0000 Manifest next update: Sun 06 Jul 2025 04:19:09 +0000 Files and hashes: 1: sCOWweSXbcJLufJA9c5Vbtgn-is.crl (hash: zd8qwA6JGs6Klsy7mj4gUhKUl1/FGyg2bkLxGnl+2VQ=) 2: CC6220C0E02E11EEBA9D291AC4F9AE02.roa (hash: EfnXa4JTXRSQtpkoLm2l4ZqnMhuE0NVKwTVdEbOaaqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.crl rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 04:19:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91124CD, serialNumber=B02396C1E4976DC24BB9F240F5CE556ED827FA2B Validity Not Before: Jun 29 04:19:09 2025 GMT Not After : Jul 6 04:19:09 2025 GMT Subject: CN=6860bebd-113c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:da:60:b4:1f:06:0c:58:3d:3c:1e:72:1d:84: 32:0c:fd:7d:75:ee:38:a6:05:77:62:81:f0:b2:79: 01:50:31:8b:70:38:30:b2:36:c1:b9:4a:37:ec:3d: 5e:b4:9a:ae:c7:cf:55:76:e6:84:c9:1b:9f:4c:1e: c0:c7:04:57:1a:ee:e0:3a:d4:6b:52:af:e2:fb:1c: 52:27:d2:04:29:96:38:83:d1:ed:37:5a:63:13:23: ba:c9:a7:e0:2f:4b:6a:15:5e:5c:9a:fa:69:ba:28: 75:13:f6:ca:65:c1:5b:0c:1c:8c:91:1a:13:db:78: 2e:d0:32:36:d9:c4:92:84:7b:89:71:a0:72:a7:99: 94:ca:dc:af:8a:78:9f:89:da:c0:6d:18:70:26:5b: 4a:04:82:6b:59:07:98:53:87:e3:98:0b:c2:99:45: da:89:78:a7:d0:20:ea:78:2c:6f:0f:e2:9d:4f:ae: 2a:e4:6a:c5:82:fc:0f:23:e3:fb:6b:f9:cd:f0:8d: cd:a8:bc:a1:f3:c4:0c:f8:e5:e8:34:53:67:0c:1f: 14:9b:c1:b9:f9:a6:00:12:03:60:9f:5f:ed:ce:a6: c2:cc:bb:66:d1:c8:8d:c8:b6:f1:55:db:68:6a:d7: 17:61:03:ce:e6:6b:03:aa:c7:2c:4e:b7:a8:77:fb: e1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:6A:71:19:30:B3:5F:A1:27:DE:FA:C2:D0:69:11:71:C0:4C:A2:09 X509v3 Authority Key Identifier: keyid:B0:23:96:C1:E4:97:6D:C2:4B:B9:F2:40:F5:CE:55:6E:D8:27:FA:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:a3:9f:65:9b:67:2d:7f:97:9e:0f:e4:4f:62:c3:78:f5:79: 1f:9e:ed:2c:9b:d9:36:3f:29:81:db:f3:af:07:e0:4d:1e:22: a9:40:6f:46:57:60:61:f8:ff:c2:a9:13:92:73:f6:64:f8:a4: 00:30:8e:68:95:8b:61:3f:b7:a4:a6:9d:8e:fd:c2:58:ae:91: d9:74:85:27:0a:6e:0a:4a:32:b6:6d:b5:44:da:83:12:0b:5f: 2f:96:e1:99:e3:e6:bb:0f:fc:cf:e6:ca:ba:1b:e0:95:d2:fc: c8:2f:5c:48:27:52:b8:46:35:85:96:e2:3c:96:30:43:33:50: 5f:d3:ff:34:b9:31:a6:a3:ec:26:43:a5:c0:03:25:d5:f7:22: e9:ae:6f:82:3e:35:17:d6:0c:b2:00:e9:0a:90:e6:5a:2e:09: fe:77:0e:56:e9:13:be:46:d4:3e:0f:e9:8a:d8:2f:e1:ad:b5: 4c:81:dd:61:86:61:dd:b1:03:73:ea:4e:1e:69:c5:fc:48:d3: ba:d2:2f:87:39:85:e8:16:57:f4:3d:7f:78:d9:e7:95:bc:75: 1f:b6:58:ce:ba:04:69:1b:f1:3a:12:79:19:72:de:65:a5:55: 1f:75:a3:e8:36:69:e1:9c:e0:a1:42:82:15:f9:d5:70:6f:6b: 7a:66:c5:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI0Q0QxMTAvBgNVBAUTKEIwMjM5NkMxRTQ5NzZEQzI0QkI5RjI0MEY1Q0U1NTZF RDgyN0ZBMkIwHhcNMjUwNjI5MDQxOTA5WhcNMjUwNzA2MDQxOTA5WjAYMRYwFAYD VQQDEw02ODYwYmViZC0xMTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAptpgtB8GDFg9PB5yHYQyDP19de44pgV3YoHwsnkBUDGLcDgwsjbBuUo37D1e tJqux89VduaEyRufTB7AxwRXGu7gOtRrUq/i+xxSJ9IEKZY4g9HtN1pjEyO6yafg L0tqFV5cmvppuih1E/bKZcFbDByMkRoT23gu0DI22cSShHuJcaByp5mUytyvinif idrAbRhwJltKBIJrWQeYU4fjmAvCmUXaiXin0CDqeCxvD+KdT64q5GrFgvwPI+P7 a/nN8I3NqLyh88QM+OXoNFNnDB8Um8G5+aYAEgNgn1/tzqbCzLtm0ciNyLbxVdto atcXYQPO5msDqscsTreod/vhEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMlqcRkw s1+hJ976wtBpEXHATKIJMB8GA1UdIwQYMBaAFLAjlsHkl23CS7nyQPXOVW7YJ/or MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjRDRC9COTdCNzYzOEUw MkQxMUVFOUEwNDJGNUNDNEY5QUUwMi9zQ09Xd2VTWGJjSkx1ZkpBOWM1VmJ0Z24t aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NDT1d3ZVNYYmNKTHVmSkE5YzVWYnRnbi1pcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjRDRC9COTdCNzYzOEUwMkQxMUVFOUEwNDJGNUNDNEY5QUUwMi9zQ09Xd2VTWGJj Skx1ZkpBOWM1VmJ0Z24taXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5o59lm2ctf5eeD+RPYsN49Xkfnu0sm9k2PymB2/OvB+BNHiKpQG9G V2Bh+P/CqROSc/Zk+KQAMI5olYthP7ekpp2O/cJYrpHZdIUnCm4KSjK2bbVE2oMS C18vluGZ4+a7D/zP5sq6G+CV0vzIL1xIJ1K4RjWFluI8ljBDM1Bf0/80uTGmo+wm Q6XAAyXV9yLprm+CPjUX1gyyAOkKkOZaLgn+dw5W6RO+RtQ+D+mK2C/hrbVMgd1h hmHdsQNz6k4eacX8SNO60i+HOYXoFlf0PX942eeVvHUftljOugRpG/E6EnkZct5l pVUfdaPoNmnhnOChQoIV+dVwb2t6ZsWD -----END CERTIFICATE-----Generated at Tue Jul 1 03:10:48 2025 by rpki-client